suse · CVE-2015-5288

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-5288 severity low: SUSE including 118 source package names (libecpg6-10.10-1.15.1, libecpg6-10.5-1.3.1, …), 238 product×package rows across 37 product lines (SUSE Liberty Linux 7, SUSE Linux Enterprise Desktop 11 SP3, … (37 product lines)): Fixed 238.

Description:

The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.